Post

"Sandbox" has become one of the most overloaded words in Kubernetes, and now it feels like it can mean any of a dozen distinct things. On October 29, we're hosting a live panel on the isolation landscape moderated by @alex.zenla.io. edera.link/vev-1029

14/10/26, 5:34 pm1 repost3 likes

The Projekt

@wearetheprojekt.bsky.social

gVisor, Kata microVMs and a tight seccomp profile all get sold as a sandbox, and they fail very differently once a kernel bug lands. A shared vocabulary would save a lot of security reviews.